Vulnerability in POWER METER SICAM Q200 Family and SICAM P850/P855 Products by Siemens
CVE-2022-43439
9.9CRITICAL
Key Information:
- Vendor
Siemens
- Vendor
- CVE Published:
- 8 November 2022
What is CVE-2022-43439?
A vulnerability exists in the POWER METER SICAM Q200 family and the SICAM P850/P855, affecting versions below specified thresholds. The devices fail to properly validate the Language-parameter in requests made to the web interface over port 443. This oversight allows an authenticated remote attacker to disrupt the device's functioning by causing it to crash, which is followed by an automatic reboot. Additionally, it opens the possibility for arbitrary code execution, posing significant security risks to systems utilizing these meters.
Affected Version(s)
POWER METER SICAM Q100 All versions < V2.50
POWER METER SICAM Q100 All versions < V2.50
POWER METER SICAM Q100 All versions < V2.50